Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 4404
  • Last Modified:

Active Directory change default common name CN

In Windows 2003 AD, the user object field "Full Name" sets the CN (common name) and displayName among some other things.

In my domain we like to have the display name as "last name, first name" -- so that's what is in the Full Name box.

Unfortunately, that also makes the CN the same thing.  I need the CN to be the same as the user logon name which is "first initial last name".

Does anyone know how I can change directly or separate the CN from the Full Name field?

Thanks
0
ipmcinc
Asked:
ipmcinc
  • 7
  • 2
1 Solution
 
PberSolutions ArchitectCommented:
Load adsi edit
Connect to the configuration container
Then CN=displayspecifiers
then CN=409 for english (this might be specifig to your region)
then CN=Users-Display and right click and properties
Then go to the attribute createDialog
Change the value to:

%<i>%<givenName>

this will change new users, existing users you will have to do a rename to fix (I think).
0
 
PberSolutions ArchitectCommented:
Also check out this article

http://www.computerperformance.co.uk/exchange2003/exchange2003_GAL_custom_display.htm#Custom%20Display%20Names

You can use ADmodify to change the existing accounts.
0
 
PberSolutions ArchitectCommented:
Sorry I was a bit off on the syntax

Use this instead:

%1<givenName>%<sn>

0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
PberSolutions ArchitectCommented:
Note this method will change the way your users show up in the GAL which might be bad.  You might be able to do a ADmodify to just change the CN.
0
 
ipmcincAuthor Commented:
Do you know how to change what the default CN is?

Currently the default CN is whatever the Full Name is; which is last name, first name ( i.e. smith, john)

When I add new users in the future, I want the default CN to be whatever the Logon Name is; which is first initial last name (i.e. jsmith)

Thanks!
0
 
PberSolutions ArchitectCommented:
The above method will do just that...

Ours is set to:
%<sn>, %<givenName>

All of our users CN's are:
CN=lastname\, firstname, Ou=blahblahblah
0
 
PberSolutions ArchitectCommented:
After playing with this in the lab, it doesn't look like you can use partials.  

On an exchange recipient policy you can do something like %1g%i%s@email.com

See: http://support.microsoft.com/kb/250455/en-us

Apparently you can't with this.  You'd have to do the fullname lastname

%<givenName>%<sn>
0
 
ipmcincAuthor Commented:
If I change CN=Users-Display, I believe that would change the display name.  I don't want to change the display name.

I want to change the "Full Name" field
0
 
PberSolutions ArchitectCommented:
When I change the settings in the lab and click apply and start creating a new user, it immediately starts filling in the Fullname field in the format that is specified by the createDialog
0

Featured Post

Free Backup Tool for VMware and Hyper-V

Restore full virtual machine or individual guest files from 19 common file systems directly from the backup file. Schedule VM backups with PowerShell scripts. Set desired time, lean back and let the script to notify you via email upon completion.  

  • 7
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now